Tinfoil HatCatalogFeed statusEvery known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Oracle WebLogic Server Remote Code Execution Vulnerability CVE-2020-14644 | CriticalExploited | 94.5% | 15 Jul, 2020 | |
Microsoft Windows DNS Server Remote Code Execution Vulnerability CVE-2020-1350 | CriticalExploited | 96.7% | 14 Jul, 2020 | |
Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability CVE-2020-1040 | CriticalExploited | 7.4% | 14 Jul, 2020 | |
SAP NetWeaver Missing Authentication for Critical Function Vulnerability CVE-2020-6287 | CriticalExploited | 94.7% | 14 Jul, 2020 | |
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability CVE-2020-10987 | CriticalExploited | 79.8% | 13 Jul, 2020 | |
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability CVE-2020-15505 | CriticalExploited | 99.7% | 07 Jul, 2020 | |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability CVE-2020-5902 | CriticalExploited | 100.0% | 01 Jul, 2020 | |
DrayTek Multiple Vigor Routers OS Command Injection Vulnerability CVE-2020-15415 | CriticalExploited | 84.5% | 30 Jun, 2020 | |
Sophos XG Firewall Buffer Overflow Vulnerability CVE-2020-15069 | CriticalExploited | 10.7% | 29 Jun, 2020 | |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability CVE-2020-2021 | CriticalExploited | 4.4% | 29 Jun, 2020 | |
IBM Data Risk Manager Remote Code Execution Vulnerability CVE-2020-4428 | CriticalExploited | 61.7% | 07 May, 2020 | |
IBM Data Risk Manager Security Bypass Vulnerability CVE-2020-4427 | CriticalExploited | 70.0% | 07 May, 2020 | |
Roundcube Webmail Remote Code Execution Vulnerability CVE-2020-12641 | CriticalExploited | 84.4% | 04 May, 2020 | |
Juniper Junos OS Path Traversal Vulnerability CVE-2020-1631 | CriticalExploited | 4.9% | 04 May, 2020 | |
SaltStack Salt Unauthenticated Remote Code Execution CVE-2020-11651, GHSA-pjhf-vpx3-33r3, PYSEC-2020-102 | CriticalExploited | 96.6% | 30 Apr, 2020 | PyPI salt |
Sophos SFOS SQL Injection Vulnerability CVE-2020-12271 | CriticalExploited | 42.4% | 27 Apr, 2020 | |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability CVE-2020-3161 | CriticalExploited | 83.9% | 15 Apr, 2020 | |
Oracle WebLogic Server Unspecified Vulnerability CVE-2020-2883 | CriticalExploited | 94.6% | 15 Apr, 2020 | |
VMware vCenter Server Information Disclosure Vulnerability CVE-2020-3952 | CriticalExploited | 90.4% | 10 Apr, 2020 | |
Grandstream Networks UCM6200 Series SQL Injection Vulnerability CVE-2020-5722 | CriticalExploited | 84.3% | 23 Mar, 2020 | |
Liferay Portal Deserialization of Untrusted Data Vulnerability CVE-2020-7961 | CriticalExploited | 99.9% | 20 Mar, 2020 | |
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability CVE-2020-8599 | CriticalExploited | 11.9% | 18 Mar, 2020 | |
Unraid Remote Code Execution Vulnerability CVE-2020-5847 | CriticalExploited | 95.8% | 16 Mar, 2020 | |
Microsoft SMBv3 Remote Code Execution Vulnerability CVE-2020-0796 | CriticalExploited | 99.8% | 12 Mar, 2020 | |
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability CVE-2020-10181 | CriticalExploited | 14.9% | 11 Mar, 2020 | |
SAP Solution Manager Missing Authentication for Critical Function Vulnerability CVE-2020-6207 | CriticalExploited | 98.1% | 10 Mar, 2020 | |
Zoho ManageEngine Desktop Central File Upload Vulnerability CVE-2020-10189 | CriticalExploited | 99.9% | 06 Mar, 2020 | |
Zyxel Multiple NAS Devices OS Command Injection Vulnerability CVE-2020-9054 | CriticalExploited | 100.0% | 04 Mar, 2020 | |
Apache Tomcat Improper Privilege Management Vulnerability CVE-2020-1938 | CriticalExploited | 99.3% | 24 Feb, 2020 | |
Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability CVE-2020-7796 | CriticalExploited | 93.6% | 18 Feb, 2020 | |
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability CVE-2020-8657 | CriticalExploited | 91.9% | 06 Feb, 2020 | |
PlaySMS Server-Side Template Injection Vulnerability CVE-2020-8644 | CriticalExploited | 86.7% | 05 Feb, 2020 | |
Multiple DrayTek Vigor Routers Web Management Page Vulnerability CVE-2020-8515 | CriticalExploited | 100.0% | 01 Feb, 2020 | |
OpenSMTPD Remote Code Execution Vulnerability CVE-2020-7247 | CriticalExploited | 99.0% | 29 Jan, 2020 | |
Oracle Multiple Products Remote Code Execution Vulnerability CVE-2020-2555 | CriticalExploited | 97.1% | 15 Jan, 2020 | |
Oracle Fusion Middleware Unspecified Vulnerability CVE-2020-2551 | CriticalExploited | 92.8% | 15 Jan, 2020 | |
Microsoft .NET Framework Remote Code Execution Vulnerability CVE-2020-0646 | CriticalExploited | 99.2% | 14 Jan, 2020 | |
D-Link DIR-859 Router Command Execution Vulnerability CVE-2019-17621 | CriticalExploited | 90.6% | 30 Dec, 2019 | |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability CVE-2019-19781 | CriticalExploited | 100.0% | 27 Dec, 2019 | |
Remote Code Execution Vulnerability in NPM mongo-express CVE-2019-10758, GHSA-h47j-hc6x-h3qq, SNYK-JS-MONGOEXPRESS-473215 | CriticalExploited | 84.7% | 24 Dec, 2019 | npm mongo-express |
IBM Planning Analytics Remote Code Execution Vulnerability CVE-2019-4716 | CriticalExploited | 86.4% | 18 Dec, 2019 | |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability CVE-2019-18935 | CriticalExploited | 99.7% | 11 Dec, 2019 | |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability CVE-2019-5544 | CriticalExploited | 98.1% | 06 Dec, 2019 | |
QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 | CriticalExploited | 89.3% | 05 Dec, 2019 | |
QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 | CriticalExploited | 82.7% | 05 Dec, 2019 | |
QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 | CriticalExploited | 14.4% | 05 Dec, 2019 | |
QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 | CriticalExploited | 88.1% | 05 Dec, 2019 | |
Sangoma FreePBX Improper Authentication Vulnerability CVE-2019-19006 | CriticalExploited | 55.9% | 21 Nov, 2019 | |
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability CVE-2019-11043 | CriticalExploited | 99.8% | 28 Oct, 2019 | |
Nostromo nhttpd Directory Traversal Vulnerability CVE-2019-16278 | CriticalExploited | 99.0% | 14 Oct, 2019 |